Palo Alto Networks Expedition SQL Injection Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 14/11/2024. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| expedition | ≥ 1.2.0, < 1.2.96 | 1.2.96 |
An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free